CVE-2023-41040

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2023-41040
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2023-08-30 22:15:00 UTC
Updated2023-09-29 20:15:00 UTC
DescriptionGitPython is a python library used to interact with Git repositories. In order to resolve some git references, GitPython reads files from the `.git` directory, in some places the name of the file being read is provided by the user, GitPython doesn't check if this file is located outside the `.git` directory. This allows an attacker to make GitPython read any file from the system. This vulnerability is present in https://github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe17e51f63a830adbf/git/refs/symbolic.py#L174-L175. That code joins the base directory with a user given string without checking if the final path is located outside the base directory. This vulnerability cannot be used to read the contents of files but could in theory be used to trigger a denial of service for the program. This issue has not yet been addressed.

Risk And Classification

Problem Types: CWE-22

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Gitpython Project Gitpython All All All All

References

ReferenceSourceLinkTags
github.com/gitpython-developers/GitPython/blob/1c8310d7cae144f74a671cbe1... MISC github.com
[SECURITY] [DLA 3589-1] python-git security update MISC lists.debian.org
Blind local file inclusion · Advisory · gitpython-developers/GitPython · GitHub MISC github.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Legacy QID Mappings

  • 242625 Red Hat Update for Satellite 6.14.1 (RHSA-2023:7851)
  • 242871 Red Hat Update for OpenStack Platform 17.1 (RHSA-2024:0215)
  • 242876 Red Hat Update for OpenStack Platform 17.1 (RHSA-2024:0190)
  • 506176 Alpine Linux Security Update for py3-gitpython
  • 6000049 Debian Security Update for python-git (DLA 3589-1)
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report